Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:52
Type | Values Removed | Values Added |
---|---|---|
References | () http://osvdb.org/93953 - | |
References | () http://secunia.com/advisories/52963 - Vendor Advisory | |
References | () http://www.tipsandtricks-hq.com/ecommerce/wordpress-shopping-cart-change-log-319 - |
Information
Published : 2014-05-13 14:55
Updated : 2024-11-21 01:52
NVD link : CVE-2013-2705
Mitre link : CVE-2013-2705
CVE.ORG link : CVE-2013-2705
JSON object : View
Products Affected
tipsandtricks-hq
- wordpress_simple_paypal_shopping_cart
CWE
CWE-352
Cross-Site Request Forgery (CSRF)